JP5001755B2 - Data processing system and data processing method - Google Patents

Data processing system and data processing method Download PDF

Info

Publication number
JP5001755B2
JP5001755B2 JP2007222167A JP2007222167A JP5001755B2 JP 5001755 B2 JP5001755 B2 JP 5001755B2 JP 2007222167 A JP2007222167 A JP 2007222167A JP 2007222167 A JP2007222167 A JP 2007222167A JP 5001755 B2 JP5001755 B2 JP 5001755B2
Authority
JP
Japan
Prior art keywords
data
unit
encrypted
permission code
extended function
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
JP2007222167A
Other languages
Japanese (ja)
Other versions
JP2009054073A (en
Inventor
幸一 森下
Original Assignee
株式会社リコー
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 株式会社リコー filed Critical 株式会社リコー
Priority to JP2007222167A priority Critical patent/JP5001755B2/en
Publication of JP2009054073A publication Critical patent/JP2009054073A/en
Application granted granted Critical
Publication of JP5001755B2 publication Critical patent/JP5001755B2/en
Application status is Active legal-status Critical
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06QDATA PROCESSING SYSTEMS OR METHODS, SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00Commerce, e.g. shopping or e-commerce
    • G06Q30/04Billing or invoicing, e.g. tax processing in connection with a sale
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06QDATA PROCESSING SYSTEMS OR METHODS, SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL, SUPERVISORY OR FORECASTING PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q30/00Commerce, e.g. shopping or e-commerce
    • G06Q30/02Marketing, e.g. market research and analysis, surveying, promotions, advertising, buyer profiling, customer management or rewards; Price estimation or determination
    • G06Q30/0283Price estimation or determination

Description

The present invention relates to a data processing system and a data processing method having extended function management means.

  Multifunction machines having the functions of a copier, a facsimile machine, and a printer are excellent in space saving and the like, and are often installed in offices instead of single-function copiers. In addition, information processing systems that connect multiple computers to each other via a network and share resources such as printers connected to the same network have become widespread, and user requests for multifunction devices have been diversified year by year. Yes.

  In response to such a user request, the multifunction peripheral is provided with various functions, but some of these functions may be unnecessary depending on the user. Therefore, among functions that can be installed in the multifunction peripheral, functions that are assumed to be used only by some users are dealt with by adding an expansion board and a program for operating the expansion board (see Patent Document 1). . In addition, in order to save the trouble of adding such an expansion board and program, hardware and software that implement those functions are installed in advance, and the functions are set so that they cannot be used by default. There is also known a multi-function machine that can use these functions when a user wears a release device (see Patent Document 2).

  However, when an extension function is introduced by adding an extension board and a program, the extension function can be used only by a device in which the extension function is introduced. For example, if the data encryption function is added as an extended function to the scanner distribution function that transfers image data read by a scanner to another multifunction device or computer for output or display, the same encryption-decryption function It is necessary to output with the device which has. For this reason, since the range in which the extended function can be used is limited, there is a demerit that the effect of introducing the extended function is reduced for the user.

  In addition, in a multifunction device that can use the extended function when a function restriction release device is installed, there is a problem that the extended function of the distribution destination cannot be managed from the distribution source when that multifunction device is the data distribution destination. .

JP 2006-14082 A JP 2005-33277 A

  The present invention has been made to solve such a problem, and an object of the present invention is to make it possible to manage an extended function of a destination device from a data source device.

The present invention provides a data distribution source device comprising: encryption means for encrypting data to obtain encrypted data; distribution means for distributing the encrypted data; and encryption distributed from the data distribution source device A data processing system comprising a data distribution destination device comprising: receiving means for receiving data; and decryption means having a function of decrypting encrypted data encrypted by the encryption means, wherein the data The distribution source device further includes means for generating a permission code permitting use of the decryption means, and combining means for attaching the permission code to the encrypted data encrypted by the encryption means, The data distribution destination device is based on a separating unit that separates the permission code from the encrypted data received by the receiving unit, and a permission code separated by the separating unit. And means for controlling the operation of the serial decoding means is further provided Ru data processing system.
According to the present invention, the data distribution source device encrypts the data into encrypted data, and the data distribution source device generates a permission code that permits the use of the decryption means of the data distribution destination device. A permission code generation step, a synthesis step in which the data distribution source device attaches the permission code to the encrypted data, and a distribution step in which the data distribution source device distributes the encrypted data with the permission code attached thereto. A receiving step in which the data distribution destination device receives encrypted data distributed from the data distribution source device; a separation step in which the data distribution destination device separates the permission code from the received encrypted data; and and controlling the operation of its own decoding means based on the authorization code data destination device is the separation, which is a data processing method which includes a.

According to the present invention, when the encrypted data is distributed from the data distribution source device, the permission code permitting the use of the decryption means of the data distribution destination device is attached to the encrypted data. it is possible to control the use of the decoding means, output data can be ing in operational setting for distribution source is intended.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[First Embodiment]
1 and 2 are block diagrams of an image processing apparatus as a data distribution source and a data distribution destination in the data processing system according to the first embodiment of the present invention. The data processing system according to this embodiment includes one image processing apparatus serving as a data distribution source, one or more image processing apparatuses serving as data distribution destinations, and a wireless or wired data transmission path (not shown) connecting them. And have. This system configuration is the same for the second to seventh embodiments.

  As shown in FIG. 1, the data processing source image processing apparatus 10 includes a data input unit 11, an extended function module 12, a permission information generation unit 13, an extended function use data addition unit 14, and a data distribution unit 15.

  The data input unit 11 inputs image data from the outside. The extended function module 12 performs processing by a predetermined extended function on the input image data to generate processed image data a, sends the processed image data to the extended function use data adding unit 14, and also uses the extended function use application information b. It is generated and sent to the permission information generator 13.

  Here, the extended function use application information b includes the ID information (identification information) of the image processing apparatus 20 (FIG. 2) of the data distribution destination designated by the user using an operation unit not shown, and the extended function module 24. It contains information indicating that the use of is permitted. When the user distributes the same image data to a plurality of data processing devices, the user can also permit the use of the extended function module 24 to all the data processing devices. The use of 24 can also be permitted.

  The permission information generating unit 13 issues an extended function use permission code c based on the input extended function use application information b, and sends it to the extended function use data adding unit 14. The extended function use data adding unit 14 adds the extended function use permission code c to the image data a, generates distribution data, and sends it to the data distribution unit 15. The data distribution unit 15 distributes the input distribution data to a specified distribution destination.

  As shown in FIG. 2, the image processing apparatus 20 that is a data distribution destination includes a data input unit 21, a data separation unit 22, a permission information determination unit 23, an extended function module 24, and a data output unit 25.

  The data input unit 21 receives the distribution data distributed from the image processing apparatus 10 and sends it to the data separation unit 22. The data separating unit 22 determines whether or not the extended function use permission code c is included in the input distribution data, and if included, separates the image data a and the extended function use permission code c. And sent to the extended function module 24 and the permission information determination unit 23, respectively. If the distribution data does not include the extended function use permission code c, the image data a is sent to the extended function module 24.

  The permission information determination unit 23 generates extended function use permission information d based on the input extended function use permission code c, and sends it to the extended function module 24. Based on the input of the extended function use permission information d, the extended function module 24 performs processing by a predetermined extended function on the image data a to generate processed image data and sends it to the data output unit 25. The data output unit 25 outputs the input image data to the outside.

FIG. 3 is a flowchart showing the operation of the image processing apparatus 10.
In step S1, image data is input to the data input unit 11, and in step S2, the extended function module 12 performs data processing by using the extended function on the input image data to generate processed image data a. .

  Next, in step S3, the extended function use data adding unit 14 determines whether or not the extended function use permission code c has been issued. If it is issued (S3: YES), in step S4, the extended function use data adding unit 14 adds the extended function use permission code c to the image data a to generate distribution data. If it has not been issued (S3: NO), the extended function use data adding unit 14 sends the input image data a to the data distribution unit 15 as it is.

  Finally, in step S <b> 5, the data distribution unit 15 distributes the input distribution data to the image processing apparatus 20.

FIG. 4 is a flowchart showing the operation of the image processing apparatus 20.
In step S 11, the distribution data is input to the data input unit 21 and sent to the data separation unit 22. The data separation unit 22 determines whether or not the extended function use permission code c is included in the distribution data, and when included, the distribution data is separated into the image data a and the extended function use permission information c. The former is sent to the extended function module 24, and the latter is sent to the permission information determination unit 23. If it is not included, the image data d is sent to the extended function module 24.

  Next, in step S12, the extended function module 24 determines whether it is necessary to use the extended function module 24 for processing the image data a. If it is determined that it is necessary (S12: YES), in step S13, the permission information determination unit 23 determines whether or not the extended function use permission code c is attached. If it is determined that it is attached (S13: YES), in step 14, the extended function module 24 performs data processing using the extended function on the image data a and sends it to the data output unit 25. In step S15, the data output unit 25 outputs image data.

  If it is determined in step S12 that the extended function module 24 is not required to process the image data a (S12: NO), the extended function module 24 applies an extended function to the input image data in step S16. The data is sent to the data output unit 25 without performing the used data processing. If it is determined in step S13 that the extended function use permission code c is not attached (S13: NO), it is impossible to continue the process using a display unit (not shown) in step S17. A message (video or audio) is displayed.

  As described above, according to the data processing system of this embodiment, when distributing image data, information (extended function use permission code c) that permits the use of the extended function module 24 of the image processing apparatus 20 that is the distribution destination is used. By attaching to the image data, it becomes possible to control the use of the extended function module 24 of the distribution destination, so that the image data can be output with the operation setting intended by the distribution source.

[Second Embodiment]
5 and 6 are block diagrams of an image processing apparatus as a data distribution source and a data distribution destination in the data processing system according to the second embodiment of the present invention, respectively.

  As shown in FIG. 5, the image processing apparatus 30 that is the data distribution source includes an extended function module 32 including an image input unit 31, an encryptor 32a, and a permission code composition unit 32b, a processing content receiving unit 33a, and a decryption function permission code generation. An extended function management unit 33 including a unit 33b, and a data distribution unit 34.

  The image input unit 31 reads the document α and generates image data. The encryption device 32a encrypts the image data output from the image input unit 31. At this time, the encryptor 32a uses the information indicating that the image data distributed to the data processing destination image processing apparatus 40 (FIG. 6) uses the function of the encryptor 32a, the data distribution destination image processing apparatus 40. Simultaneously generates permission information for enabling the function of the decoder 42b, ID information for specifying the delivery destination image output device 40, and time limit information for allowing the delivery destination image processing device 40 to use (decode) the delivery data. And sent to the processing content receiving unit 33a. Here, the ID information for specifying the image processing device 40 may be information that can identify the device and does not overlap with other devices, such as a device-specific password, serial number, and IP address. The extended function usage time limit information is arbitrarily set according to the security level of data to be distributed, the freshness of information, and the like.

  The processing content receiving unit 33a instructs the decryption function permission code generation unit 33b to generate a decryption function use permission code based on the information transmitted from the encryptor 32a. The decryption function permission code generation unit 33b generates a decryption function use permission code and sends it to the permission code synthesis unit 32b.

  The permission code composition unit 32b attaches the decryption function use permission code to the image data sent from the encryptor 32a, and sends it to the data distribution unit 34. As a method for attaching the decryption function use permission code, a method of combining the decryption function use permission code as a header of image data into one file can be adopted. In this way, the permission code composition unit 32b generates distribution data β in which the decryption function use permission code β2 is attached to the encrypted document data β1 and sends it to the data distribution unit 34. The data distribution unit 34 distributes the data. Data β is distributed to the image processing apparatus 40.

  As shown in FIG. 6, the image processing apparatus 40 as a data distribution destination includes an extended function module 42 including a data input unit 41, a data separation unit 42a, and a decoder 42b, a function use permission determination unit 43a, and a decoder use permission control unit. An extended function management unit 43 including 43b and a data output unit 44.

  The data input unit 41 receives the distribution data β distributed from the image processing device 30 and sends it to the data separation unit 42a. The data separation unit 42a determines whether or not the decryption function use permission code β2 is included in the distribution data β. If the decryption function use permission code β2 is included, the data separation unit 42a converts the distribution data β into the encrypted document data β1 and the decryption function. The data is separated into the use permission code β2, and the former is sent to the decoder 42b and the latter is sent to the device use permission determination unit 43b. If it is not included, the encrypted document data β1 is sent to the decoder 42b.

  The device use permission determining unit 43a analyzes the decryption function use permission code β2 to determine whether or not the distribution data β is addressed to the image processing device 40 (confirmation of ID information), and the use of the distribution data β is permitted. The processing included in the distribution data β (encryption by the encryptor 32a here) can be handled by the extended function of the image processing device 40 (here, the function of the decryptor 42b). If there is no problem, the usage permission information of the decoder 42b is issued to the decoder usage permission control unit 43b. The decoder use permission control unit 43b controls the operation of the decoder 42b based on the issued use permission information.

  When the use permission information is issued, the decryptor 42b decrypts the encrypted document data β1 and sends it to the data output unit 44. The data output unit 44 performs print output based on the decrypted document data and outputs a document α.

  As a result of analyzing the decryption function use permission code β2, the device use permission determination unit 43a determines that the identification information is different or that the processing included in the distribution data β cannot be handled by the extended function of the image processing device 40 Displays a message (video or audio) indicating that the process cannot be continued on a display means (not shown).

FIG. 7 is a flowchart showing the operation of the image processing apparatus 30.
In step S21, the image input unit 31 reads the document α to generate image data. In step S22, the encryptor 32a performs data processing (encryption in this case) on the image data by using the extended function, and encrypts the image data. Used document data β1 is generated.

  Next, in step S23, the user inputs the ID information of the image processing apparatus 40 that is the data distribution destination using an operation unit not shown, and in step S24, the permission code composition unit 32b expands the extended function ( Here, it is determined whether or not a use permission code for the function of the decoder 42b has been issued. If it is issued (S24: YES), in step S25, the permission code composition unit 32b attaches the extended function use permission code (here, the decryption function use permission code β2) to the encrypted document data β1. To generate distribution data β. If it has not been issued (S24: NO), the permission code composition unit 32b sends the input encrypted document data β1 to the data distribution unit 34 as it is.

  Finally, in step S <b> 26, the data distribution unit 34 distributes the input distribution data β to the image processing apparatus 40.

FIG. 8 is a flowchart showing the operation of the image processing apparatus 40.
In step S31, the distribution data β is input to the data input unit 41 and sent to the data separation unit 42a. The data separation unit 42a determines whether or not the extended function use permission code (in this case, the decryption function use permission code β2) is included in the distribution data. If included, the distribution data β has been encrypted. The document data β1 and the decryption function use permission code β2 are separated, and the former is sent to the decoder 42b, and the latter is sent to the device use permission judgment unit 43a. If it is not included, the encrypted document data β1 is sent to the decoder 42b.

  In step S32, the decryptor 42b determines whether it is necessary to use the extended function (here, the decryptor 42b) for processing the encrypted document data β1. If it is determined that it is necessary (S32: YES), in step S33, the device use permission determination unit 43a determines whether or not an extended function use permission code (here, decryption function use permission code β2) is attached. judge. When it is determined that it is attached (S33: YES), in step 34, the device use permission determination unit 43a analyzes the extended function use permission code β2, and uses the ID information to identify the extended function (here, the decoder 42b). It is determined whether or not use is permitted.

  If it is determined that the data is permitted, in step S35, the decryptor 42b performs data processing (in this case, decryption) using the extended function on the encrypted document data β1, and the data output unit 44 In step S36, the data output unit 44 performs print output based on the decrypted document data and outputs the document α.

  If it is determined in step S32 that it is not necessary to use the extended function (decoder 42b here) (S32: NO), in step S37, the decoder 42b uses the extended function for the input image data. The data is sent to the data output unit 44 without being subjected to data processing (decoding in this case). If it is determined in step S33 that the extended function use permission code is not attached (S33: NO), or if it is determined in step S34 that use is not permitted (S34: NO), in step S38, A display means (not shown) displays a message (video or audio) indicating that the process cannot be continued.

  As described above, according to the data processing system of this embodiment, when image data is distributed, the information (extended function use permission code) that permits the use of the decoder 42b of the image processing apparatus 40 that is the distribution destination is encrypted. By attaching to the completed document data, it is possible to control the use of the delivery destination decoder 42b, so that the image data can be output with the operation setting intended by the delivery source.

[Third Embodiment]
9 and 10 are block diagrams of an image processing apparatus as a data distribution source and a data distribution destination in the data processing system according to the third embodiment of the present invention, respectively.

  As shown in FIG. 9, the image processing apparatus 50 that is the data distribution source includes an extended function module 52 that includes an image input unit 51, an encryption device 52 a, and a function execution program synthesis unit 52 b, a processing content reception unit 53 a, and a decryption program generation unit. It has an extended function management unit 53 consisting of 53b, and a data distribution unit 54.

  The image input unit 51, the encryption unit 52a, the processing content reception unit 53a, and the data distribution unit 54 are respectively the image input unit 31, the encryption unit 32a, the processing content reception unit 33a, and the data distribution unit 30 of the second embodiment. It has the same configuration as the data distribution unit 34.

  The decryption program generation unit 53b generates a program for decrypting the encrypted document data encrypted by the encryptor 52a based on an instruction from the processing content reception unit 53a, and sends it to the function execution program composition unit 52b. The function execution program synthesis unit 52b attaches the decryption program γ2 sent from the decryption program generation unit 53b to the encrypted document data γ1 sent from the encryptor 52a to generate distribution data γ, and the data The data distribution unit 54 distributes the distribution data γ to the image processing device 60 (FIG. 10).

  As shown in FIG. 10, the image processing apparatus 60 includes an extended function module 62 including a data input unit 61, a data separation unit 62a, and a decryption program execution unit 62b, a function use permission determination unit 63a, and a decryption program execution unit 63b. An extended function management unit 63 and a data output unit 64.

  The data input unit 61, the function use permission determination unit 63a, and the data output unit 64 are the same as the data input unit 41, the function use permission determination unit 43a, and the data output unit 44 of the image processing apparatus 40 of the second embodiment, respectively. It has the composition of.

  The data separation unit 62a determines whether or not the function expansion program (here, the decryption program γ2) is included in the distribution data γ. If included, the data separation unit 62a separates the distribution data γ and includes the function use permission determination unit 63a. And the image data (encrypted document data γ1 here) is sent to the decryption program execution unit 62b. On the other hand, if it is not included, the encrypted document γ1 is sent to the decryption program execution unit 62b.

  The function use permission determining unit 63a determines the extended function program (here, the decoding program γ2) distributed by the image processing device 60 based on information such as the type of the separated program, the size of the program, and the free size of the memory area to be executed. The decryption program implementation unit 63b expands the decryption program, and the decryption program execution unit 62b decrypts the encrypted document data γ1 and outputs the data. Send to unit 64. The data output unit 64 performs print output based on the decrypted document data and outputs a document α.

  As described above, according to the data processing system of the present embodiment, the function expansion is realized by supplying software from the image processing apparatus 50 that is the data distribution source. Even if it is not done, an extended function can be added, and image data can be output with an operation setting intended by the distribution source.

[Fourth Embodiment]
FIG. 11 is a block diagram of an image processing apparatus as a data distribution source in the data processing system according to the fourth embodiment of this invention. A block diagram of the image processing apparatus of the data distribution destination is the same as that in FIG. 6 (second embodiment). In this block diagram, the same parts as those in FIG. 5 are denoted by the same reference numerals as those in FIG. 5 (second embodiment).

  The image processing apparatus 301 is obtained by adding a function use management unit 35 to the image processing apparatus 30 of the second embodiment, and other parts are the same as those of the second embodiment. The function use management unit 35 has a function of generating charging information based on the output of the processing content receiving unit 33a and notifying the charging management server 1 on the network. The billing information is generated according to the extended function or combination of functions to be used, the number of devices to be distributed, and the like.

FIG. 12 is a flowchart showing the operation of the image processing apparatus 301.
In step S41, the image input unit 31 reads the document α to generate image data, and in step S42, the processing content receiving unit 33a determines whether or not the extended function is used in the image processing apparatus as the data distribution destination.

  If it is determined that the extended function is to be used (S42: YES), data processing using the extended function (encryption by the encryptor 32a here) is performed in step S43. Next, in step 44, it is determined whether or not the image processing apparatus as the distribution destination is a charging target. If it is a billing target (S44: YES), in step S45, the function use management unit 35 generates billing information and transmits it to the billing management server 1. In step S46, the data distribution unit 34 performs encryption processing. The distribution data β with the extended function use permission code (in this case, the decryption function use permission code β2) attached to the completed document data β1 is distributed.

  If it is determined that the extended function is not used in the image processing apparatus at the data distribution destination (S42: NO), normal processing is performed in step S45, that is, the image data of the document α generated by the image input unit 31 is not encrypted. It is sent to the distribution unit 34. On the other hand, if it is determined in step 44 that it is not a charging target, the distribution data β is distributed without executing the charging process. The operation of the data processing destination image processing apparatus is the same as that of the second embodiment.

  As described above, according to the data processing system of the present embodiment, the image processing apparatus 301 as the data distribution source collectively performs billing management, so that the data processing destination image processing apparatus is used when the extended function is used. Since it is possible to charge only for the amount to be charged, it is possible to consolidate the devices for charging, and management becomes easy. Also, even if the data distribution destination (data usage side device) does not conclude the contract for using the extended function, the data distribution source device performs the payment function for the extended function usage right at the distribution destination device. There is no need to pay for additional functions for functions that are not normally used by the device.

  In this embodiment, the function use management unit 35 and the charge management server 1 are added to the second embodiment. However, the function use management unit 35 and the charge management server 1 are added to the third embodiment. May be.

[Fifth Embodiment]
FIG. 13 is a block diagram of an image processing apparatus as a data distribution source in the data processing system according to the fifth embodiment of the present invention. A block diagram of the image processing apparatus of the data distribution destination is the same as that in FIG. 6 (second embodiment). In this block diagram, the same parts as those in FIG. 11 are denoted by the same reference numerals as those in FIG. 11 (fourth embodiment).

  The image processing apparatus 302 adds a data amount management unit 36 that manages the data amount of the image data generated by the image input unit 31 to the image processing apparatus 301 in the fourth embodiment, and uses the output as a function. By sending it to the management unit 35, the function usage management unit 35 charges information according to the data amount of the image data generated by the image input unit 31 (here, the data amount of the image data generated by reading the document α). Can be generated.

  According to the data processing apparatus of this embodiment, since the data distribution source can charge only for the use of the extended function, the extension used is more than the fourth embodiment that charges the number of apparatuses to be distributed. The relationship between functions and billing amounts is clarified. In addition, if the amount of data to be distributed to one device is small and the number of devices to be distributed is large, the chargeable amount may be smaller than in the fourth embodiment, so select a billing method that is easy for the user to use become able to.

[Sixth Embodiment]
14 and 15 are block diagrams of an image processing apparatus as a data distribution source and a data distribution destination in the data processing system according to the sixth embodiment of the present invention, respectively.

  As shown in FIG. 14, the image processing apparatus 70 of the data distribution source has an extended function including an image input unit 71, an extended function module 72 including an encryptor 72a, a processing content receiving unit 73a, and a decryption function permission code generating unit 73b. A management unit 73, a data distribution unit 74, and a function usage management unit 75 are included.

  The image input unit 71, the encryption device 72a, the processing content reception unit 73a, and the data distribution unit 74 are respectively the image input unit 31, the encryption device 32a, and the processing content reception of the image processing device 301 in FIG. 11 (fourth embodiment). The configuration is the same as that of the unit 33a and the data distribution unit 34.

  The encoding function permission code generation unit 73b sends the generated encoding function use permission code to the function use management unit 75. The function use management unit 75 generates billing information based on information related to billing transmitted from the processing content accepting unit 73a (extended function or combination of functions, number of devices to be distributed, etc.), and the billing management server on the network 1 and the encoding function permission code received from the encoding function permission code generation unit 73b is transmitted to the function use authentication server 2 on the network.

  As shown in FIG. 15, an image processing apparatus 80 as a data distribution destination includes an extended function management including a data input unit 81, an extended function module 82 including a decoder 82a, a function use determining unit 83a, and a decoder use permission control unit 83b. Unit 83, data output unit 84, and device use permission confirmation unit 85.

  The data input unit 81, the decoder 82a, the decoder use permission control unit 83b, and the data output unit 84 are respectively the data input unit 41, the decoder 42b, and the decoder use permission control unit of FIG. 6 (second embodiment). 43b and the data output unit 44.

  The function use determining unit 83a analyzes the distribution data supplied from the data input unit 81 to determine whether or not an extended function is necessary for processing the distribution data, and if necessary, the function use permission confirming unit 85. The function use authentication server 2 is accessed via the terminal, and the presence / absence of the extension function use permission code (here, the encoding function use permission code β2) addressed to the image processing apparatus 80 is confirmed. It passes to the use permission control part 83b.

  FIG. 16 is a flowchart showing the operation of the image processing apparatus 70. Here, steps S51 to S54 and S57 to S59 are the same as steps S41 to S44 and S45 to S47 in FIG.

  In step S55, the function use management unit 75 receives the ID information of the data processing destination image processing apparatus 80 from the processing content reception unit 73a. In step S56, the encoding function permission code received from the encoding function permission code generation unit 73b. Is transmitted to the function use authentication server 2 in association with the ID information of the credential image processing apparatus 80.

  FIG. 17 is a flowchart showing the operation of the image processing apparatus 80. Here, steps S61, S62, S64, S66, S67, S68, and S69 are the same as steps S31, S32, S34, S35, S36, S38, and S37 in FIG.

  When the function use determining unit 83a determines in step S63 that the extended function use permission code is not attached (S63: NO), in step S65, the function use determining unit 83a passes the function use permission checking unit 85 to the function use authentication server 2. Access and receive the extended function use authorization code.

  As described above, according to the present embodiment, the function usage authentication server 2 on the network manages the extended function usage permission code without attaching it to the distribution data, thereby making it possible to centralize management of the usage status. If both the distribution data and the extended function use permission code are once uploaded to the server, preparation of the distribution data is possible even if the image processing apparatus 80 at the data distribution destination cannot receive the distribution data immediately. And the accounting process can be terminated.

[Seventh Embodiment]
FIGS. 18 and 19 are flowcharts showing the operation of the image processing apparatuses of the data distribution source and the data distribution destination in the data processing system of the sixth embodiment of the present invention, respectively. The block diagram of the image processing apparatus of the data distribution source and the data distribution destination is the same as that of the sixth embodiment. In this embodiment, when the data processing source image processing apparatus generates data using the extended function, the data distribution destination image processing apparatus confirms the function usage authorization server with the function usage authorization server. Because when accessed.

  Steps S71 to S77 in FIG. 18 are the same as steps S51 to S53, S55, S56, S58, and S59 in FIG. 16 (sixth embodiment). That is, the image processing apparatus of the data distribution source of this embodiment performs a step (S54) of determining whether or not the image processing apparatus of the data distribution destination is a charging target from the sixth embodiment, and performs the charging process. Step (S57) is omitted.

  Steps S81 to S84 and S86 to S90 in FIG. 19 are the same as steps S61 to S69 in FIG. 17 (sixth embodiment). Step S85 is a procedure in which the function usage confirmation permitting unit 85 of the image processing apparatus 80 confirms the presence or absence of the extended function usage permission code addressed to the function usage authentication server 2, and is not shown in FIG. It is. Therefore, the operation of the image processing apparatus 80 of the data distribution destination of this embodiment is the same as that of the sixth embodiment.

  On the other hand, when the function use authentication server 2 confirms the presence / absence of the extended function use permission code from the image processing device 80, the function use authentication server 2 executes a charging process for the extended function use permission code in step S91. The extended function use permission code is transmitted to the image processing apparatus 80, and the timing for executing the charging process is different from that of the sixth embodiment.

  Thus, according to the present embodiment, the extended function use permission code is managed by the function use authentication server 2 on the network without being attached to the distribution data, and the image processing apparatus 80 as the data distribution destination uses the extended function. Since the charging process is performed when requested, it is possible to charge at the timing when the extended function is actually used. For this reason, for example, when the distribution data is not used in the image processing apparatus of the distribution destination, useless charging can be avoided.

  Each of the above embodiments relates to an image processing apparatus, but the present invention can also be applied to an apparatus that processes data other than image data. Further, the extended function is not limited to encryption / decryption, but can be applied to other functions.

It is a block diagram of the image processing apparatus of the data delivery source in the data processing system of the 1st Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery destination in the data processing system of the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery origin in the data processing system of the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery destination in the data processing system of the 1st Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery origin in the data processing system of the 2nd Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery destination in the data processing system of the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery origin in the data processing system of the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery destination in the data processing system of the 2nd Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery origin in the data processing system of the 3rd Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery destination in the data processing system of the 3rd Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery origin in the data processing system of the 4th Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery origin in the data processing system of the 4th Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery origin in the data processing system of the 5th Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery origin in the data processing system of the 6th Embodiment of this invention. It is a block diagram of the image processing apparatus of the data delivery destination in the data processing system of the 6th Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery origin in the data processing system of the 6th Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery destination in the data processing system of the 6th Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery origin in the data processing system of the 7th Embodiment of this invention. It is a flowchart which shows operation | movement of the image processing apparatus of the data delivery destination in the data processing system of the 7th Embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Billing management server, 2 ... Function use authentication server, 10, 30, 50, 70, 301, 302 ... Data distribution source image processing device, 20, 40, 60, 80 ... Data Image processing apparatus of distribution destination, 12... Extended function module of image processing apparatus of data distribution source, 15... Data distribution unit, 24... Extended function module of image processing apparatus of data distribution destination,. Permission information generation unit, 23... Permission information determination unit, 35... Function use management unit, 36... Data amount management unit, 52 b. Generation unit, 62b... Decryption program execution unit, 63b... Decryption program implementation unit.

Claims (4)

  1. A data distribution source device comprising: encryption means for encrypting data to obtain encrypted data; distribution means for distributing the encrypted data; and receiving encrypted data distributed from the data distribution source device A data processing system comprising a data distribution destination device comprising: a receiving unit; and a decrypting unit having a function of decrypting the encrypted data encrypted by the encrypting unit,
    The data distribution source device further includes means for generating a permission code for permitting use of the decryption means, and combining means for attaching the permission code to the encrypted data encrypted by the encryption means. ,
    The data distribution destination device includes: a separating unit that separates the permission code from the encrypted data received by the receiving unit; and a unit that controls the operation of the decrypting unit based on the permission code separated by the separating unit. further data processing system Ru comprising a.
  2. The data processing system of claim 1, wherein
    It said data distribution source apparatus, when the authorization code is delivered to the accompanying encrypted data, further data processing system Ru comprising means for generating charging information for the use of the decoding means in the data distribution destination device.
  3. The data processing system according to claim 2, wherein
    It said means for generating charging information, the data processing system that generates billing information according to the data amount of the data to be encrypted by the encryption means.
  4. An encryption process in which the data distribution source device encrypts the data to obtain encrypted data;
    A permission code generation step for generating a permission code for permitting the data distribution source device to use the decryption means of the data distribution destination device;
    A combining step in which the data distribution source device attaches the permission code to the encrypted data;
    A delivery step in which the data delivery source device delivers encrypted data with the authorization code attached;
    A receiving step in which the data distribution destination device receives encrypted data distributed from the data distribution source device;
    A separation step in which the data distribution destination device separates the authorization code from the received encrypted data;
    The data delivery destination device controlling the operation of its decryption means based on the separated authorization code;
    A data processing method comprising:
JP2007222167A 2007-08-29 2007-08-29 Data processing system and data processing method Active JP5001755B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
JP2007222167A JP5001755B2 (en) 2007-08-29 2007-08-29 Data processing system and data processing method

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2007222167A JP5001755B2 (en) 2007-08-29 2007-08-29 Data processing system and data processing method
US12/176,452 US20090063368A1 (en) 2007-08-29 2008-07-21 Data processing apparatus and data processing method

Publications (2)

Publication Number Publication Date
JP2009054073A JP2009054073A (en) 2009-03-12
JP5001755B2 true JP5001755B2 (en) 2012-08-15

Family

ID=40408993

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2007222167A Active JP5001755B2 (en) 2007-08-29 2007-08-29 Data processing system and data processing method

Country Status (2)

Country Link
US (1) US20090063368A1 (en)
JP (1) JP5001755B2 (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007030920A2 (en) * 2005-09-12 2007-03-22 Sand Box Technologies Inc. System and method for controlling distribution of electronic information
US20110197144A1 (en) * 2010-01-06 2011-08-11 Terry Coatta Method And System Of Providing A Viewing Experience With Respect To A Document Having Read-only Content
JP5408729B2 (en) * 2010-03-30 2014-02-05 カシオ計算機株式会社 Control system, control terminal, and control method
JP2018137547A (en) * 2017-02-20 2018-08-30 株式会社東芝 Information processing apparatus and image forming apparatus

Family Cites Families (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1184781A4 (en) * 2000-02-21 2003-01-22 Seiko Epson Corp System for mediating printing on network
EP1204021A4 (en) * 2000-02-21 2003-01-22 Seiko Epson Corp System for mediating printing on network
US7117493B2 (en) * 2001-03-28 2006-10-03 Ricoh Company, Ltd. Image formation system, software acquisition method, and computer product
JP4149150B2 (en) * 2001-08-15 2008-09-10 富士通株式会社 Transmission distribution system and transmission distribution method under license offline environment
JP2003203162A (en) * 2002-01-09 2003-07-18 Sony Communication Network Corp Contents distributing device, contents distribution control device, contents key control device, contents distribution control method, contents distribution control program and contents key control program
JP2003316913A (en) * 2002-04-23 2003-11-07 Canon Inc Service providing method, information processing system, control program thereof and recording medium
JP2004094439A (en) * 2002-08-30 2004-03-25 Fuji Xerox Co Ltd Image processing system, image processor, image processing method, program and storage medium
JP4018498B2 (en) * 2002-10-15 2007-12-05 キヤノン株式会社 Management device, management method, control program
JP4217455B2 (en) * 2002-10-15 2009-02-04 キヤノン株式会社 Peripheral device, information processing method, and control program
JP4769409B2 (en) * 2003-01-07 2011-09-07 キヤノン株式会社 Image forming apparatus, control method thereof, and storage medium
US7119716B2 (en) * 2003-05-28 2006-10-10 Legalview Assets, Limited Response systems and methods for notification systems for modifying future notifications
JP2005244488A (en) * 2004-02-25 2005-09-08 Matsushita Electric Ind Co Ltd Composite machine
JP4920879B2 (en) * 2004-08-06 2012-04-18 キヤノン株式会社 Image processing apparatus and data processing apparatus
JP2006277088A (en) * 2005-03-28 2006-10-12 Kyocera Mita Corp License management method for image processor
JP4189602B2 (en) * 2005-08-17 2008-12-03 コニカミノルタビジネステクノロジーズ株式会社 Image forming apparatus, image processing system, function expanding method for image forming apparatus, and method for forming virtual network
JP4682781B2 (en) * 2005-09-30 2011-05-11 ブラザー工業株式会社 Multifunctional peripheral device and multifunctional peripheral device control program
US20070121147A1 (en) * 2005-11-30 2007-05-31 Fatima Corona Systems and methods for sending scan or print jobs to multiple network destinations
JP4124230B2 (en) * 2005-12-28 2008-07-23 ブラザー工業株式会社 Printing apparatus and program
JP4718419B2 (en) * 2006-01-27 2011-07-06 株式会社リコー Image forming apparatus and file management method
JP3809495B1 (en) * 2006-01-30 2006-08-16 クオリティ株式会社 Software management system
JP2007214609A (en) * 2006-02-07 2007-08-23 Konica Minolta Business Technologies Inc Image processing apparatus
EP2026615B1 (en) * 2007-07-30 2014-10-29 Ricoh Company, Ltd. Information processing apparatus, information processing system, and program product

Also Published As

Publication number Publication date
US20090063368A1 (en) 2009-03-05
JP2009054073A (en) 2009-03-12

Similar Documents

Publication Publication Date Title
EP1040630B1 (en) Data communications
CA2560577C (en) Apparatus and method for moving and copying rights objects between device and portable storage device
DE69830382T2 (en) Secure printing
US6721958B1 (en) Optional verification of interactive television content
EP0739135B1 (en) Data security scheme for point-to-point communication sessions
EP0471373A2 (en) Information processing apparatus with replaceable security element
JP4814339B2 (en) Constrained encryption key
US7769171B2 (en) Method for transmitting digital data in a local network
US7587599B2 (en) System and method for providing services
EP0706118A1 (en) Data protection system
US7200230B2 (en) System and method for controlling and enforcing access rights to encrypted media
US6304969B1 (en) Verification of server authorization to provide network resources
JP2008514123A (en) System and method for providing authorized access to digital content
JP4482266B2 (en) Method and apparatus for managing symmetric keys in a communication network
KR100613156B1 (en) Data security in an information processing device
EP1110399B1 (en) System and method for copy protecting transmitted information
EP0929023B1 (en) Secure printing
US7264411B2 (en) Print system, print device and print instruction method
US7359883B2 (en) License management system, license management device, relay device and terminal device
US8332958B2 (en) Image forming system
EP1508235B1 (en) Data transmitting apparatus, data receiving apparatus, data transmission system and data transmission method
EP0880088A2 (en) Data copyright management system and apparatus
US7849316B2 (en) Methods and apparatus for secure document printing
EP1931106A2 (en) Information providing system
EP1800485A1 (en) Method and system for authorizing multimedia multicasting

Legal Events

Date Code Title Description
A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20100305

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20111228

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20120119

A521 Written amendment

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20120316

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20120515

A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20120518

R150 Certificate of patent or registration of utility model

Free format text: JAPANESE INTERMEDIATE CODE: R150

FPAY Renewal fee payment (event date is renewal date of database)

Free format text: PAYMENT UNTIL: 20150525

Year of fee payment: 3